Privacy Policy

1. Overview

Tax Evidence Package Builder ("we," "us") processes information you provide when organizing tax evidence. This policy describes what we collect, why, and your choices.

2. Information we collect

• Account data: email address, name, authentication identifiers, and session metadata.
• Project data: tax-year labels, reported items, document metadata, evidence links, notes, and coverage status.
• Documents: files you upload to private storage, including filenames and content necessary to display and export them.
• Sharing data: share tokens (hashed at rest), grantee identifiers, acceptance timestamps, and revocation records.
• Technical logs: request metadata needed for security, debugging, and abuse prevention.

3. How we use information

We use collected information to:

• Provide document storage, linking, package export, and sharing features
• Authenticate users and enforce row-level access controls
• Respond to support requests and improve reliability
• Comply with legal obligations

We do not sell your personal information or use uploaded tax documents for advertising.

4. Storage and isolation

Data is stored in a dedicated Supabase project with private object storage and row-level security. Tenant isolation prevents one account from accessing another's projects or documents.

5. Sharing

When you invite a professional, they can access shared project data after authenticating and accepting the invitation. You control who receives invitations and can revoke access. We do not share your data with third parties except infrastructure providers necessary to operate the Service and as required by law.

6. Retention and deletion

Documents remain until you delete them or your account. Deleting a document removes its storage object before the database record. Account deletion requests remove or anonymize personal data according to documented retention procedures. Backups may retain data for a limited period before rotation.

7. Security

We use authentication, private buckets, signed URLs for downloads, and database policies to protect data. No method of transmission or storage is completely secure; you are responsible for safeguarding your credentials and share links.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data. Contact us to exercise these rights.

9. Children

The Service is not directed to individuals under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy. Material changes will be posted here with an updated date. Continued use after changes constitutes acceptance.

11. Contact

Privacy inquiries: support@taxprooflink.example